Method of Regulating Smart Card Usage and/or 
Concession Eligibility in a Smart Card System 



5 Field of the Invention 

The present invention relates generally to a method of regulating smart 
card usage and/or concession eligibility in a smart card system. 

Background of the Invention 

10 Most smart card systems employ a stored value concept. This means that 

the smart card has the electronic value stored in its internal memory. These smart 
cards can be purchased with electronic cash pre-loaded. Electronic cash value can 
be added to these smart cards at kiosks by the cardholder via credit cards, debit 
cards, cash, etc. These kiosks are generally referred to as add value stations. The 

15 disadvantages to these systems are that they require convenient and multiple add 
value stations available to the cardholder in order to gain acceptance. Moreover, 
there is added cost to the system owner to purchase, install and maintain these 
stations, as well as the credit, debit and cash handling costs. The reloading of 
these smart cards is left at the discretion of the cardholder, that is to say that if the 

20 initial value of the purchased smart card is used up and the cardholder cannot 

access an add value station, the smart card system will simply deny access to the 
system unless there is the sufficient electronic value stored on the smart card. 

In the event that a non-anonymous, stored- value smart card is lost or 
stolen, the cardholder must report the smart card to a customer service center and 

25 a replacement card is sent to the cardholder. A disadvantage to this model is that 
once a smart card is reported lost or stolen, the smart card is permanently 
inactivated even if the smart card is subsequently found since the value of the 
lost/stolen card has been duplicated on the replacement card. In anonymous 
stored-value smart cards, there is nothing that can be done to reimburse the 

30 cardholder for the lost value on the lost/stolen smart card since there is no link 
between the smart card and the cardholder. In non-stored value smart card 
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systems, where the smart card is linked to a cardholder's bank account to make 
automatic deductions, there are numerous business scenarios where a card may be 
deemed temporarily ineligible to participate in the system. In these systems, 
permanently disabling the smart card would greatly inconvenience the cardholder 
5 and represent a significant cost to the system operators/owners. 

Thus, there exists a need for regulating smart card usage in smart card 
systems without burdening the cardholder with constant monitoring and 
replenishing the value on the card and without having the system owners bear 
unnecessary costs. 

10 

Brief Description of the Drawings 

A preferred embodiment of the invention is now described, by way of 
example only, with reference to the accompanying drawings in which: 

FIG. 1 illustrates a diagram of a smart card system for regulating smart 
1 5 card usage in accordance with the preferred embodiment of the present invention; 

FIGS. 2A and 2B illustrate a flow chart depicting the algorithm used to 
determine the eligibility of a smart card to participate in the system in accordance 
with the preferred embodiment of the present invention; 

FIG. 3 illustrates a bounce diagram for disabling a smart card in 
20 accordance with the preferred embodiment of the present invention; 

FIG. 4 illustrates a bounce diagram for enabling a smart card in 
accordance with the preferred embodiment of the present invention; 

FIG. 5 illustrates a diagram of a smart card system for regulating 
concession eligibility in accordance with an alternative embodiment of the present 
25 invention; 

FIGS. 6 A and 6B illustrate a flow chart depicting regulation of concession 
eligibility in accordance with the alternative embodiment of the present invention; 
and 

FIG. 7 illustrates a bounce diagram of regulating concession eligibility in 
30 accordance with the alternative embodiment of the present invention. 
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Detail Description of the Preferred Embodiment 

As shown in FIG. 1, a smart card system 100 comprises front office 
components and back office components. A discussion of the front office 
5 components will be discussed first. Examples of front office components include 
the smart card and the card acceptance location 110. The card acceptance 
location 110 comprises a card reader that reads the smart cards when presented to 
it, and memory in which to record transactions and store operating and card 
information. The card acceptance location 110 may be mobile/portable location 

10 (e.g., bus, train, taxi, etc.), and the reader may be a hand held device or semi- 
permanent device installed at the card acceptance location 110. When the card 
acceptance location 1 10 is mobile/portable, it is typically connected to the back 
office components in an off-line mode. The card acceptance location 110 may 
also be a fixed location, such as retail stores, and connected to the back office 

15 components in an on-line mode. The card acceptance location 1 10 is responsible 
for creating smart card transactions and forwarding these transactions to the back 
office components for processing, including settlement and clearing of these 
transactions. 

Presentation of a smart card to a card acceptance location 110 allows the 
20 card acceptance location 1 10 to power the smart card and communicate securely 
with it at a set frequency. During this communication, commands and responses 
are securely passed back and forth between the smart card and the card acceptance 
location 110. During the initial stages of communication, the smart card and the 
card acceptance location 110 identify each other in an unsecure manner. This 
25 initial identification allows the card acceptance location 110 and the smart card to 
quickly identify each other as components on the same system 1 00, as well as 
have the opportunity to check the component status of each device. After such 
identification, a secure verification of the smart card and card acceptance location 
1 10 is performed. This verification process is commonly known as a three pass 
30 mutual authentication. The three pass mutual authentication is more time 
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consuming than the initial identification process, and along with the secure data 
communication method, is responsible for a large portion of the total transaction 
time. Once the mutual authentication has successfully completed, specific smart 
card application commands are performed. For example, the smart card 
5 transaction is recorded in a transaction log file on the smart card and a transaction 
record is generated, stored in the card acceptance location's memory, and later 
forwarded to the back office components for processing. 

The smart card is known to the system 100 by a unique identification 
identifier ("UID") stored on the smart card in electronic form. This UID is 

10 electronically linked in the smart card system to the cardholder. Based on this 

identification, the concept of a hot list is introduced in accordance with the present 
invention. The hot list is a collection of smart card UIDs that the card acceptance 
location 110 must take an action on when the UID of the presented smart card is 
matched with an entry on the hot list. In the preferred embodiment of the present 

15 invention, the hot list is stored locally at the card acceptance location 1 10 and 

updated in a batch format by the back office components on a periodic basis, e.g., 
hourly, daily, weekly, monthly, etc. Preferably, the hot list comprises black list 
items and green list items. The black list items represent smart card UIDs that 
should be disabled when the smart card is presented to any of the card acceptance 

20 locations 1 10 in the smart card system 100, thereby denying access to the system 
1 00. The green list items represent smart card UIDs that have previously been 
deemed ineligible to participate in the system, placed on the black list and 
disabled, and is now ready to be re-enabled when the smart card is presented to 
any of the card acceptance locations 110, thereby re-gaining access to the system 

25 100. 

In accordance with the preferred embodiment of the present invention, a 
smart card UID is added to the hot list as a black list item, for example, when the 
smart card is reported lost or stolen. Another example is when the cardholder's 
account that the smart card is linked to falls below a predetermined threshold 
30 balance or is delinquent. Typically, the predetermined threshold balance is 

CM01891G 4 Express Mail No.: EL034004806US 



established by a set of criteria determined by the owner of the smart card system, 
but can also be established by other means. 

With respect to green list items, a smart card UID is added to the hot list as 
a green list item, for example, when the smart card that was previously reported as 
5 lost or stolen is found. Another example is when the cardholder's account balance 
has been replenished, thus meeting or exceeding the predetermined threshold 
balance of the owner of the smart card system. The advantage of this system is 
that it allows a customer to quickly resume smart card transactions after he/she 
was temporarily deemed ineligible from participating. 

10 In accordance with the preferred embodiment of the present invention, the 

back office components may limit the sizes of the black list and green list to fit the 
memory of a card acceptance location. It may limit the list sizes by geographic 
location of the card acceptance location, the value of a card with a particular UID, 
the computed potential fraud value of the card, or any combination of these and 

15 other methods. 

Now lets turn the discussion to the back office components. Examples of 
the back office components are a central processing component 120, a financial 
processing component 130, a customer service component 140, and a smart card 
processing component 150. The smart card system 100 may also comprise a 

20 configuration manager 160 and a card reader interface device 170. The central 
processing component 120 is responsible for consolidating transactions from 
service providers. In certain non-stored value smart card systems, the central 
processing component 120 may rate the transaction. The central processing 
component 120 may also have the responsibility of monitoring transactions for 

25 possible anomalies that result from fraudulent card usage. For example, the 

central processing component 120 will detect when two transactions occur at the 
same time, with the same smart card UID, at different locations. As such, the 
central processing component 120 assists in fraud protection for the cardholder. 
The financial processing component 130 is responsible for settling the 

30 transactions between the cardholders and the service providers. In stored value 

CM01891G 5 Express Mail No.: EL034004806US 



systems, the financial processing component 130 tallies all transactions belonging 
to a specific service provider and transfers the correct funds to the service 
provider. In non-stored value systems, the financial processing component 130 
tallies all transactions owed to a specific service provider by a respective 
5 cardholder, deducts the amounts from the respective cardholder's bank account, 
and transfers the equivalent amount to the service provider to settle the 
transaction. Thus, the smart card system 100 in accordance with the preferred 
embodiment of the present invention is based on the automatic revaluation of 
linked financial accounts. That is to say that there is no electronic cash value 

10 stored on the smart card. The cardholder provides the system with a bank account 
number that funds are initially drawn out of and when the balance of the smart 
card account gets to a preset low level, the system automatically initiates a 
transfer of funds from the cardholder's bank account to the smart card account 
maintained by the smart card system owner. The financial processing component 

15 130 must constantly monitor the financial status of the cardholders to ensure that 
they are able to pay for their accrued transactions. An advantage of this system to 
the system owner is that there is no add value stations required. Additionally, 
there is no burden on the cardholder to reload electronic cash, thus making 
participation in the system un-interrupted. 

20 The customer service component 140 of the smart card system 100 is 

responsible for interfacing with the cardholder in handling questions, complaints, 
and issues. One specific function of the customer service component 140 is to 
allow the cardholders to report the physical status of their smart cards should the 
physical status change. For example, the cardholders will report to the customer 

25 service component 140 that their smart card is lost, stolen or found. 

The smart card processing component 150 of the smart card system 100 is 
responsible for monitoring the conditions that would make a smart card eligible or 
ineligible to participate in the system 100 based on the criteria of the service 
providers, system operators, system owners, or any combination thereof. In the 

30 preferred embodiment of the present invention, the smart card processing 
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component 150 monitors the fraudulent smart card usage data from the central 
processing component 120, the cardholder financial status data from the financial 
processing component 130, and the smart card physical status from the customer 
service component 140, in determining the eligibility of the smart card to 
5 participate in the system 100. From this information, the smart card processing 
components 1 50 builds the hot list. 

The configuration manager 160 combines the generated hot list with other 
related operational data and forwards the data to a card reader interface device 
170 (e.g., a central computer) for which that data is intended. 

10 The card reader interface device 170 communicates with numerous card 

acceptance locations 1 10 in the system 100. All card acceptance locations 110 
connected to the card reader interface device 1 70 may or may not share common 
operational data, including the hot list. The card reader interface device 170, 
however, ensures transmission of the correct operational data to the respective 

15 card acceptance locations 110. The card acceptance locations 110 are mapped to 
a card reader interface device 170 based on geographical proximity to the card 
reader interface device 170, as well as other factors, such as the service providers 
who are using the card acceptance locations 110, the system operators who are 
maintaining the card acceptance locations 110, and the system owners who own 

20 the card acceptance locations 110. Notwithstanding the above, security reasons, 
however, may dictate that card acceptance locations 1 10 in different retail stores 
may not be mapped to a single card reader interface device 170. 

On either a periodic basis, or on demand, the smart card processing 
component 150 of the system 100 builds the hot list and forwards the hot list to - 

25 the configuration manager 160 for inclusion with other operational data to be sent 
to the card acceptance locations 1 10 via the card reader interface device 170. On 
a timed basis, or whenever the card acceptance location 110 comes on-line, the 
card reader interface device 170 forwards the operational data, which includes the 
hot list, to the intended card acceptance locations 110. Preferably, the card 

30 acceptance locations 110 acknowledge successful receipt of the hot list and other 
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operational data, and no further attempts are made by the system 100 to transmit 
the lists to these particular card acceptance locations 110 until updated operational 
data is generated. Each card acceptance location 110 stores the most recent 
operational data in its memory. 
5 Now that each card acceptance location 110 has locally stored operational 

data, the card acceptance location 110 can operate in a standalone mode to create 
smart card transactions for smart cards presented to it for transaction purposes. 
Smart card transactions include, but are not limited to, debit transactions, credit 
transactions, disable transactions and enable transactions. 

10 In operation, when a smart card is presented to a card acceptance location 

110, the card acceptance location 110 checks the state of the smart card during 
initial identification. In the preferred embodiment, a status bit in the system file 
indicates the state of the smart card. The smart card has a file system that has 
critical files stored on it to interact with the card acceptance location 1 10 to create 

15 a transaction record. The transaction log file is one of these critical files. 
Additionally, critical data from the system file is sent to the card acceptance 
location 110 during the initial communication between the card acceptance 
location 110 and the smart card, prior to the mutual authentication stage. This 
data quickly indicates to the card acceptance location 1 10 the status of the smart 

20 card prior to the secure and more time consuming mutual authentication process. 
Usage of both the system file and the transaction log file is used to comprise a 
solution that would allow a card acceptance location 1 1 0 to disable and/or enable 
a smart card. Thus, the card acceptance locations 110 disable and enable smart 
cards based on the status information of the smart card and the hot list stored 

25 locally. 

If the smart card status bit indicates that the smart card is presently 
enabled, the card acceptance location 1 10 checks the black list items in the hot list 
for a match. If a match is found, the card acceptance location 110 sets the status 
bit to indicate that this smart card is disabled and blocked from further use until 
30 this condition is cleared. Further, the card acceptance location 110 instructs the 
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smart card to block all access to the transaction log file until further notice. The 
card acceptance location 110 creates a disable transaction and forwards it to the 
SCPS 1 50 to purge the entry from the black list items in the hot list. The entry is 
purged from the hot list once the card acceptance location 110 takes action on the 
5 smart card in order to keep the size of the hot list to a minimum, and prevents the 
list from growing without bound. If a match is not found, the card acceptance 
location 110 performs the desired transaction. Depending on the application, the 
card acceptance location 110 may generate audio and/or visual indicators 
indicating that that transaction was successfully completed. The card acceptance 

10 location 110 forwards the transaction record to the back office components for 
further processing, settlement and clearing. If in the process of performing the 
transaction, the card acceptance location is blocked by the smart card from 
accessing its transaction log file (i.e., the status bit and the blocking status are 
inconsistent), a fraud transaction is created and transmitted to the back office 

1 5 components, the status bit is set to disabled, and the cardholder is denied 
service/product. This is in the unlikely event that a user will be able to 
independently read the file system, defeat the mutual authentication, and change 
the status bit, in an attempt to re-enable the smart card. 

If the smart card status bit indicates that the smart card is presently 

20 disabled, the card acceptance location 1 10 checks the green list items on the hot 
list. If a match is found, the card acceptance location 110 changes the status bit in 
the system file and instructs the smart card to unblock access to the transaction log 
file. The card acceptance location 110 creates an enable transaction and performs 
the desired transaction. Depending on the application, the card acceptance 

25 location 110 may generate audio and/or visual indicators indicating that the 
transaction was successfully completed. The card acceptance location 1 1 0 
forwards the transactions to the back office components for processing and 
purging the entry from the green list items on the hot list. If in the process of 
unblocking the smart card the card acceptance location finds that the smart card 

30 has already been unblocked (i.e., the status bit and the blocking status are 
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inconsistent), a fraud transaction is created and transmitted to the back office 
components, the card is blocked and the status bit is set to disabled. The 
cardholder will be denied service/product at this point. Again, this is in the 
unlikely event that a user was able to independently defeat mutual authentication 
5 and unblock the smart card, in an attempt to re-enable the smart card. If a match 
is not found, the card acceptance location 110 indicates that this smart card is 
invalid for transaction use. Preferably, the card acceptance location 110 generates 
audio and/or visual indicators indicating that this was a failed transaction, thus 
denying access to the system 1 00. 

10 In accordance with the preferred embodiment of the present invention, all 

card acceptance locations 1 10 in the smart card system 100 need not be 
synchronized with the same version of the hot list nor must they behave 
identically to each other. Further, the black list items and the green list items are 
preferably stored in separate files in order to minimize the number of entries that 

1 5 each UID of the presented smart card has to be compared to. 

FIGS. 2 A and 2B illustrate a flow chart depicting events of the preferred 
embodiment for regulating smart card usage (e.g., disablement and enablement of 
smart cards), or in other words, the algorithm used to determine the eligibility of a 
smart card to participate in the system 100. Processing begins 201 in the back 

20 office system 200, where a computer and database system monitors 202 the usage 
parameters of each smart card. The back office system 200 determines 203 
whether a particular smart card should be disabled. The particular reasons for 
disabling a smart card in the system may be that the cardholder has exceeded the 
financial limits prescribed for card usage, that the cardholder has reported the card 

25 lost or stolen, or any other reason codified in the business rules of the particular 
system. 

If the back office system 200 determines that the smart card should be 
disabled, it checks 204 to determine whether the smart card is currently enabled. 
If the smart card is not currently enabled, as determined from records in the back 
30 office's database, the back office system 200 proceeds to a combination step 210. 
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If the smart card is currently enabled, the back office system 200 determines 205 
which card acceptance location(s) 213 it should associate with the card in order to 
transmit to the appropriate card acceptance location(s) 213 a list containing which 
cards should be disabled. The back office system 200 records 206 the UID of the 
5 smart card on the disable list(s) of the card acceptance location(s) 213 it 

determined in 205, and then combines 210 disable and enable lists with other 
operational data. 

If the back office system 200 determines that the smart card should not be 
disabled 203, it determines whether the smart card is already currently disabled 

1 0 207, as represented in the database of the back office system 200. If the smart 

card is not disabled, processing proceeds at the combination step 210. If the smart 
card is disabled, the back office system 200 determines 208 which card 
acceptance location(s) 213 it should associate with the card in order to transmit to 
the appropriate card acceptance location(s) 213 a list containing which cards 

1 5 should be enabled. The back office system 200 records 209 the UID of the smart 
card on the enable list(s) of the card acceptance location(s) 213 it determined in 
208, and then combines 210 disable and enable lists with other operational data. 

During the combination step 210, the back office system 200 may 
determine that the combined enable list(s) and disable list(s) exceed the memory 

20 size of the target card acceptance location(s). If this occurs, the back office 

system may limit the sizes of the black list and green list to fit the memory of a 
card acceptance location(s). It may limit the list sizes by geographic location of 
the card acceptance location, the value of a card with a particular UID, the 
computed potential fraud value of the card, or any combination of these and other 

25 methods. In computing the potential fraud value of a card, the back office system 
200 may take into account the associated debit or credit value of a card, the 
recentness of use of the card after the cards being reported lost or stolen, the 
remaining transaction value of the card, or any combination of these or other 
values associated with the card, combined with parameters representing the 

30 business rules of the system 100 operator. 
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After combining 210 enable lists and disable lists with other operational 
data, the back office system 200 transmits 21 1 the information to card reader 
interface devices for further transmission 212 to card acceptance locations 213. In 
some embodiments of the invention, transmission to card reader interface devices 
5 is omitted, and transmission 212 is made directly to the card acceptance locations 
213. 

The card acceptance locations stores 214 the enable and disable lists and 
acknowledges their receipt to the back office system 200. When a smart card is 
presented to the card acceptance location, the card acceptance location checks 215 

10 the smart card status bit. If, according to the status bit, the smart card is disabled 
216, the card acceptance location 213 further checks 222 whether the smart card 
file system is blocked. If the smart card file system is not blocked (i.e., the status 
bit is not consistent with the blocking status), the card acceptance location 213 
determines that a fraud has occurred, creates 223 a fraud transaction, blocks the 

15 smart card file system, and disallows 221 the requested transaction. 

If the smart card status bit indicates the card is disabled 216 and the smart 
card file system is blocked 222 (i.e., the status bit and the blocking status are 
consistent), the card acceptance location 213 determines 225 whether the UID of 
the smart card is on an enable list. If the UID of the smart card is not 225 on the 

20 enable list, the card acceptance location 213 disallows 221 the requested 

service/transaction. If the UID of the smart card is on the enable list 225, the card 
acceptance location 213 sets 226 the smart card enable bit and commands the 
smart card to unblock its file system. The card acceptance location 213 then 
creates 227 an enabled transaction, allows 228 the requested service, and creates a 

25 corresponding service transaction. 

If the smart card status bit indicates 216 that the smart card is enabled, but 
the card acceptance location 213 determines 217 that the smart card file system is 
blocked (i.e., the status bit and the blocking status are not consistent), the card 
acceptance location 213 creates 224 a fraud transaction, sets the smart card 

30 disable bit, and disallows 221 the requested service/transaction. If the smart card 
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status bit indicates 216 that the smart card is not disabled, and the card acceptance 
location 213 determines 217 that the smart card file system is not blocked, then 
the card acceptance location 213 determines 21 8 whether the UID of the smart 
card is present on the disable list. If the UID of the smart card is not 2 1 8 on the 
5 disable list, the card acceptance location 213 allows 228 the requested service and 
creates a corresponding service transaction. If the UID of the smart card is 218 on 
the disable list, the card acceptance location 213 sets 219 the smart card's disable 
bit and commands the smart card to block the smart card file system. The card 
acceptance location 213 creates 220 a corresponding disabled transaction and 

10 disallows 221 the requested service. 

When the card acceptance location is at the end of its service period 229, it 
transmits all service, enable and disable transactions 230 to the back office system 
200, and ends 231 the cycle. At the back office system, transmitted transactions 
are used to purge 232 the enable and disable lists of smart card UIDs. If the card 

1 5 acceptance location is not at the end of its service period 229, it continues to 
check 215 the status of presented smart cards. 

FIGs. 3 and 4 illustrate bounce diagrams in accordance with the preferred 
embodiment of the present invention. FIG. 3 illustrates the bounce diagram for 
disabling a smart card, and FIG. 4 illustrates the bounce diagram for enabling a 

20 smart card. With reference to the above description and FIGs. 1 and 2, FIGs. 3 
and 4 are self-explanatory and will not be described in detail. 

An alternative embodiment of the present invention is illustrated in FIG. 5. 
In the alternative embodiment, the front office components are responsible for 
updating the smart cards with any cardholder concessions and loyalty programs 

25 that should be placed on the smart cards. The back office components are 

responsible for monitoring the concession and/or loyalty program eligibility as 
well as apply the concession and loyalty programs to smart card transactions. 

In accordance with the alternative embodiment of the present invention, 
the back office components may comprise a cardholder account processing system 

30 ("CHAPS") 3 10, an account processing system ("APS") 320, a SCPS 330, a 
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transaction processor 340, and a configuration manager 350. In the alternative 
embodiment, the CHAPS 310 is the back office server component responsible for 
monitoring the conditions that would make a smart card user eligible or ineligible 
for concessions and loyalty programs, as defined by the service providers, smart 
5 card system operators, and/or smart card system owners. For example, the 

CHAPS 3 1 0 automatically grants senior discount concessions to cardholders that 
reach a pre-determined age by monitoring the current age of the cardholder. The 
CHAPS 310 may also monitor customer concession status. The CHAPS 3 10 is 
dedicated to monitoring the variable number of events and statuses that should be 

10 considered in determining the cardholder's concessions in the system 300. In 
some smart card systems, there may be multiple service providers (retailers, 
transit systems, etc) that incorporate card acceptance locations as payment 
collection points in their businesses. Each service provider has well defined 
criteria determining concession and loyalty program eligibility in the smart card 

15 system. In addition, there may be separate smart card system operators and smart 
card system owners that define their own loyalty programs to reward smart card 
usage within their system. The CHAPS 310 monitors all the necessary criteria set 
by the service providers, system operators, and/or system owners to regulate 
concession and loyalty program eligibility. 

20 The APS 320 is responsible for monitoring the conditions that would make 

an account owner eligible/ineligible for loyalty programs that are available to the 
account owner, as defined by the service providers, smart card system operators, 
and/or smart card system owners. The account owner has financial responsibility 
for the smart cards that are issued to his/her account. The account owner does not 

25 necessarily have to be the cardholder (e.g., a parent paying for the service (e.g., 
public transportation) for his/her child (cardholder), etc.). 

The SCPS 330 is responsible for building the cardholder concession and 
loyalty lists that must be transmitted to the card acceptance locations, via the card 
reader interface device. The SCPS 330 must determine which concessions and 
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/ 

loyalty programs/parameters should go on the smart cards, and monitor for any 
changes effected by the CHAPS 310. 

The transaction processor 340 is responsible for rating the transactions as 
received from the front office. For each concession and loyalty program granted 
5 the cardholder and account owner, the transaction processor 340 may, for each 
transaction, price the transaction at full price/fare, at a reduced price/fare, or 
refund a part of or the whole price/fare. 

The configuration manager 350 is responsible for combining the generated 
concession and loyalty lists with other card acceptance location related 

10 configuration data and forwarding the configuration data, including the generated 
lists, to the correct card reader interface device. As described above in the 
preferred embodiment, the card reader interface device is used to facilitate data 
communications with the card acceptance locations which may be a mobile 
location, such as a bus or train, and connected to the rest of the system in an off- 

15 line mode, or may be a fixed location, such as a retail store, and connected to the 
rest of the system in an on-line mode. 

The card acceptance locations are responsible for creating the smart card 
transactions, and forwarding these transactions to the card reader interface device 
that in turn forwards them to the CHAPS 310 for concession and loyalty 

20 processing that is required for the settlement and clearing of these transactions. In 
some cases, the card acceptance locations may forward these transactions directly 
to the CHAPS 310. 

Smart card transactions include regular debit transactions for usage that 
this card acceptance location has accrued during the operational day use, as well 

25 as smart card concession/loyalty update transactions. The concession/loyalty 
update transactions serve the purpose to indicate to the CHAPS 310 that a smart 
card has been updated with the latest concessions. This allows the CHAPS 3 1 0 to 
purge the UID of the smart card from the concession list. This keeps the 
concession list size down to a minimum, and stops the list from growing without 

30 bound. 
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On either a periodic or on-demand basis, the CHAPS 310 reviews user 
eligibility for concessions and loyalty programs based on the criteria dictated by 
the service provider, system operator, and/or system owner. Likewise, for 
systems where the concessions and loyalty program/parameters are stored on the 
5 card, the CHAPS 310 must be capable of generating list(s) containing all cards 
that had a change of concessions, loyalty programs, or loyalty program 
parameters, based on the criteria dictated by the service provider. Once these lists 
are generated, they are combined with card acceptance location 
configuration/operational data (if any exists) and are routed to the destination card 

10 acceptance locations. The card acceptance locations acknowledge successful 

receipt of the lists, and no further attempts are made by the system 300 to transmit 
the lists to these particular card acceptance locations. Once a change is made to 
the concessions and loyalty programs, the transaction processor 340 will consider 
the new concessions and/or loyalty programs/parameters in determining the price 

15 of the service/product purchased by the cardholder. Any updates to the smart card 
concession status, loyalty programs, or loyalty program parameters are made to 
the smart card during the presentation of the smart card to the card acceptance 
location. Any new transactions effected by the cardholder will incorporate the 
new concessions and loyalty programs. 

20 FIGS. 6A and 6B illustrate a flowchart of the alternative embodiment of 

the present invention depicting loyalty and concessions processing. Processing 
begins 401 within a back office system 400 that comprises one or more computer 
systems employing one or more databases that monitor 402 the concession and 
loyalty parameters of the smart cards in the system. For each card, the back office 

25 system 400 determines 403 whether a loyalty or concession parameter should be 
updated on the smart card. If no parameter update is required, the next card is 
processed 404. A person of ordinary skill in the art can readily appreciate that a 
transaction list can drive the selection of cards selected for parameter update, 
rather than selecting cards sequentially by the UID of the smart card. 
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If the back office system 400 determines 403 that a smart card requires 
concession/loyalty parameter update, the back office system 400 maps 405 the 
UID of the smart card to an associated reader interface device for later 
transmission 41 1 of information to the card acceptance location 423. This 
5 mapping may occur at any step between step 403 and step 411. 

If the back office system 400 determines 406 that the card needs to be 
updated by adding a parameter to the card, it places 407 the UID of the smart card 
on the appropriate loyalty/concession "add" list. If the back office system 400 
determines 408 that the smart card needs to be updated by removing a parameter 
1 0 from the smart card, it places 409 the UID of the smart card on the appropriate 

loyalty/concession "remove'' list. The pair of steps 406, 407 may be interchanged 
with the pair 408, 409 without changing the transmission 41 1 of data from the 
back office system 400 to the card acceptance location 423. 

If smart cards or transactions remain 410 unprocessed that would update 
15 loyalty/concession parameters on the smart cards, they are processed beginning at 
step 404, and proceeding to steps 402, 403, 404, 405, 406, 407, 408, 409 and 410. 
When the back office system 400 has processed 410 all cards and/or transactions 
that require loyalty/concession parameter updates to the smart cards, it transmits 
41 1 the "add" list created in step 407 and the "remove" list created in step 409 to 
20 the card acceptance locations 423, via any existing card reader interface devices, 
as determined at step 405. 

Upon receiving the "add" and "remove" lists, the card acceptance location 
stores 412 the lists in its memory and acknowledges their receipt and storage 412 
to the back office system 400. The card acceptance location then processes each 
25 smart card presented to it. 

The card acceptance location queries 413 the stored lists to determine 
whether a presented smart card is on a loyalty/concession "add" list. If the 
presented card is on an "add" list, the card acceptance location issues a command 
414 to the smart card to update the loyalty/concession parameter on the smart 
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card. The card acceptance location records 41 5 the update in memory as a 
loyalty/concession transaction. 

The card acceptance location 423 queries 416 the stored lists to determine 
whether a presented smart card is on a loyalty/concession "remove" list. If the 
presented smart card is on a "remove" list, the card acceptance location 423 issues 
a command 417 to the smart card to remove the loyalty/concession parameter 
from the smart card. The card acceptance location 423 records 418 the update in 
memory as a loyalty/concession transaction. Depending on business rules 
governing the order of processing "add" and "remove" loyalty/concession 
transactions, the steps 413, 414 and 415 may be interchanged with steps 416, 417 
and 418. 

If the card acceptance location 423 is at the end of its service period 419, it 
transmits 420 all transactions created during its service period to the back office 
system 400. If the card acceptance location 423 is not at the end of its service 
period 419, it continues to process presented smart cards as in steps 413, 414, 415, 
416, 417 and 418. The back office system 400 purges 421 the UID of the smart 
card from its loyalty/concession "add" and "remove" lists based on the 
transactions recorded by the card acceptance location 423 in steps 415 and 418. 
When the card acceptance location 423 has transmitted 420 its transactions to the 
back office system 400, it ends 422 processing of loyalty/concession transactions 
until the next service period. 

FIG. 7 illustrates a bounce diagram of regulating concession eligibility in 
accordance with the alternative embodiment of the present invention. In light of 
the above description of the alternative embodiment, FIG. 7 is self-explanatory 
and will not be discussed in detail. 

While the invention has been described in conjunction with specific 
embodiments thereof, additional advantages and modifications will readily occur 
to those skilled in the art. The invention, in its broader aspects, is therefore not 
limited to the specific details, representative apparatus, and illustrative examples 
shown and described. Various alterations, modifications and variations will be 
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apparent to those skilled in the art in light of the foregoing description. For 
example, the smart card system in the various embodiments may have more or 
less system components, or the components may perform different functions. The 
smart card systems may have abroad range of applications that they can be used 
5 for. These may include, but certainly not limited to, access control, medical 
record applications, banking, currency replacement systems, transit or mobility, 
secure access to the intranet and internet, ad the like. Thus, it should be 
understood that the invention is not limited by the foregoing description, but 
embraces all such alterations, modifications and variations in accordance with the 
1 0 spirit and scope of the appended claims. 
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